Detection of Network Intrusion Based on a HMM Model

To solving the problem of high ratio of false alarm and self- adaptation, this paper proposes a new method to the network intrusion detection based on HMM model. According to the system call serial generated in the normal application of the program, this method builds up a HMM for the normal behavior of the computer system. And then bring forward an algorithm of anomaly detection. It is proved that this method increases the rate of accuracy and save more storage space without affecting the detection rate.